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INTRODUCTION 


Modern Russian Generation-llI/ll+ Nuclear Power Plants 
(NPP) have experienced an outstanding expansion outside 
the Russian Federation in countries such as China, Turkey, 
India, Bangladesh, Egypt, Belarus or Iran including ongo- 
ing discussions to build VVER-1200 NPPs in Hungary and 
Finland. 


One of the main peculiarities of VVER-type NPPs relative to 
western PWRs, is the horizontal Steam Generators (SG) and 
the hexagonal fuel assemblies with ZrNb-cladding materi- 
al. In addition, the water inventory on the secondary side is 
higher than the one of western-type PWR leading to a more 
benign behavior under accidental conditions. The Reactor 
Pressure Vessel (RPV) is characterized by a narrower down- 
comer compared to e.g., a German Konvoi design. The 
lower plenum deviates from the one of western-type PWRs 
hosting as many vertical structures (lower part is a slab and 
the upper part a perforated tube) as fuel assemblies aimed 
to reinforce the coolant mixing. The upper plenum consists 
of perforated cylindrical structures that influence the mixing, 
not present in western-type reactors. 


VVERs have an extended design trajectory, but there are 
some common features which have been preserved over 
time. The similarities between the Gen II VVER-1000, like the 
VVER-1000/V320 (which is the most built Russian design), 
and the Gen-lll/Ill+ designs are listed: 


e Four coolant loops with horizontal SG. 

e The Cold and Hot Leg (CL/HL) are at different heights but 
in the same angular position, where the HLs are located 
at the highest level. 

e The core is composed of 163 hexagonal fuel elements 
with 312 fuel rods, guide tubes and control rods. 

e There are no penetrations in the lower part of the RPV. 

e Spent Fuel Pool (SFP) is located inside the containment 


In this article, a detailed description of the safety systems 
of the main Gen-lll+ designs, the VVER-1200 (AES-2006), 
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is provided, including some comparisons to the Gen-lll 
VVER-1000 (AES-91 and AES-92). 


It is worth mentioning that the first two designs of the VVER 
Gen-lll were, 


e Tianwan NPP (VVER-1000/V428, AES-91) designed by 
“Saint-Petersburg Atomenergoproekt Institute”, finished in 
2005. 

e Kudankulam NPP (VVER-1000/V412, AES-92) designed 
by “Moscow Atomenergoproekt Institute” and connected 
to the grid in 2018. This is a modification of a previous 
Gen-lll design, VVER-1000/V392 (also AES-92), that was 
never built. 


These designs had a sound basis sustained on the huge 
experience obtained from the operation of 21 units of 
VVER-1000/V320. 


Both manufacturers of Tianwan and Kudankulam (KKNPP) 
are part of ROSATOM. The VVER exports outside the 
Russian Federation are managed by Atomstroyexport 
(ASE), who later started to export different designs of the 
VVER-1200 (AES-2006 and AES-2006E, AES-2006E with 
some Fukushima accident-related changes to the passive 
cooling system, including additional makeup systems and 
larger capacity of the water tank of the passive cooling sys- 
tems): 


e VVER-1200/V491: evolution of the AES-91, diverse units 
in operation such as the Leningrad II (reference plant) or 
Astravets NPP. From the V491 design, other designs like 
V522 and V527 were developed with some improvements, 
see [1] for more details. 

e VVER-1200/V392M, in operation in Novovoronezh Il-1/2 
(reference plant) which evolved from AES-92. Starting from 
this design, new designs were developed e.g. VVER-1200/ 
V509 (Akkuyu NPP), VVER-1200/V523 (Rooppur NPP), 
VVER-1300/V510 (generic VVER-TOI) and VVER-1300/ 
V510K (Kursk Il NPP, also VVER-TOI). Akkuyu NPP de- 
sign includes several characteristics and standards from 
VVER-TOI, which are depicted below. 
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Bushehr 1 Iran VVER-1000/V446 1994 2013 
fo lee ee ee ee 
Kudankulam 1/2 India WER-1000/V412 (AES-92) 2002/02 2013/16 
Novovoronezh Il-1/2 Russia VVER-1200/V392M (AES-2006) 2008/09 2016/19 
Akkuyu 1/2/3/4 Turkey VVER-1200/V509 (AES-2006) 2018/19/ 20/21 2023/24/ 25/26 
Rooppur 1/2 Bangladesh VVER-1200/V523 (AES-2006M) 2017/18 2024/25 


Kudankulam 3/4 India 


WER-1000/V412 (AES-92) 


2017/17 


Kursk II-1/2 Russia 


VVER-1300/V510K (VVER-TOI) 


2018/2019 N/A 


Bushehr 2 


Iran 


WER-1000/V528 


2019 


Table 1. Gen-Ill and Gen-lll+ VVER reactors in operation, under construction and planned in a near term. 


The first Russian design that received a certificate of com- 
pliance with the requirements of “European Utility Require- 
ments (EUR)” was the AES-92 in April 2007. Later on in 2019, 
the same certificate was obtained by the VVER-TOI design. 


As a summary, in Table 1, a list of the different VVER-designs 
of Generation Ill and Ill+ is given including the plants under 
operation, construction and planned for the near term. 


The layout of the RCS components is shown in the follow- 
ing figures: In Figure 1 the 3D view of the four loops of the 
VVER-1200/V392M including the horizontal SG is shown. 
Then, the core layout of VVER-reactors is exhibited in Fig- 
ure 2 and the fuel assembly design with the fuel rods and 
control rod positions are represented in Figure 3. 


In the following sections of the article, the safety systems 
are described in three blocks; primary system, secondary 


system and containment, each block includes a Table with 
the KKS (or AKZ) systems nomenclature. Finally, a section 
with the conclusions and the Probabilistic Safety Assess- 
ment (PSA) of different designs built during the last years is 
shown. Other differences between the different VVER-de- 
signs can be found in the selected references. The Russian 
Safety Guides can be found in http://en.gosnadzor.gov.ru/ 
framework/nuclear/safety-quides/. 


SAFETY SYSTEMS 


The overall safety systems of the VVER-reactors include the 
emergency core cooling systems, reactor shutdown sys- 
tems and the decay heat removal systems from the core and 
the containment to assure the heat removal and hence as- 
sure the core coolability. In the next sections these systems 
are described and discussed. 


Secondary hydraulic 
accumulators 


Figure 1. VVER-1200/V-392M Reactor Coolant System (Under a Creative Com- 


mons license, https:/www.sciencedirect.com/science/article/pii/S245230381730 


095X?via%3Dihub 


Reactor 


Primary hydraulic 
accumulators 


® FA with control rod 
O FA without control rod 
e In-core detector 
Figure 2. VVER-1200 core layout (modified from 


https://de.nucleopedia.org/wiki/Datei:Kern 


WWER-1200_ SWRK.svg#filelinks, Creative Com- 
mons license V3.0) 
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© Fuel rod 
@ Control rod guide tube 
@ Tube for core instrumentation 


Figure 3. VVER-1200 fuel assembly layout (Modified from 
httos://de.nucleopedia.org/wiki/Datei:TWS-1200_ Aufbau.svg. 


Creative Commons license V3.0.) 


Safety systems related with the Reactor 
Coolant System 


In this section, the RCS safety-related systems common 
to the majority of the new VVER designs are described. 
If the system is exclusive to a particular design, it will be 
noted, otherwise, it is common to all. Additionally, a sum- 
mary of these systems can be found in Table 2, where the 
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nomenclature (KKS/AKZ coding system) of each design 
is specified. 


First stage of hydro-accumulators (HA-1), Figure 4. 
This passive system consists of 4 trains (4T), each one with 
33% capacity (4Tx33%). They are similar to the ones of other 
common PWR technologies. The hydro-accumulators are 
partially filled with borated water (50 m°?) and pressurized 
with N2 to 60 bar, [2], [8]. The VVER-TOI HAs-1 have been 
moved below the service elevation in order to optimize the 
containment layout [4], [5]. The main difference with respect 
to Gen-ll PWR is that the HA-1 have direct injection lines into 
the RPV, in a similar way to AP1000 and APR-1400. These 
direct injection lines are divided into two lines for the upper 
plenum and two for the downcomer. This configuration is 
also present in previous designs like VVER-440/V213 and 
VVER-1000/V320 [6]. This characteristic resembles some 
German designs on which the accumulators’ injection oc- 
curs in CLs and HLs simultaneously. Finally, it is worth men- 
tioning that the HA-1 include isolation valves that actuate 
automatically by water level setpoint to prevent the entrance 
of N2 in the RCS, [7], [8], previous VVER-440/V213 include 
floating valves inside the HA-1 with a similar function [9]. 


Second stage of Hydro-accumulators (HA-2), Figure 5. 
It is a combination of 8 tanks (4Tx2) with a 4Tx33% redun- 
dancy and 120 m? of boron solution for each tank. They are 


VVER-120 VVER-1000 
System V392M / V491 V412 V428 V446 V320 V213 
V509 / V510 (AES-92) (AES-91) Bushehr 
KKNPP Tianwan NPP NPP 
Gen-lll+ 
ECCS JNA: JND (HPIS) JND10-40 JND (HPIS) TH (HPIS) TQ (HPIS) TJ (HPIS) 
H O, O, O, 9 O 
active JNA30/60 4Tx100% i eee 4Tx100% 4Tx100% 8Tx100% 8Tx100% 
(HPIS) JNG1 (LPIS) JNG (LPIS) TH (LPIS) TQ (LPIS) TH (LPIS) 
2Tx100% 4Tx100% JNG (LPIS): 4Tx100% 4Tx100% 3Tx100% 8Tx100% 
Sr JNA (RHRS): 4Tx100% 
JNA20/50 4Tx100% 
(LPIS) MDP and HX 
2Tx100% from JNG1 
HA-1 JNG50-80 JNG2 JNG JNG2 YT YT TH10-13 
(GE-1) JNG50-80 JNG10-40 JNG50-80 ATxX33% A4Tx50% ATx50% 
4Tx83% 4Tx83% 4Tx83% 4Tx83% 
HA-2 JNG10 (GE-2) JNG50-80 
4Tx83% 4Tx83% 
15 bar 15 bar 
HA-3 JNG10 (GE-3) 
4Tx83% 
(only V509 
and V510) 
EBIS JND 10-20 JND50-80 TW TQ 
2Tx (2x50%) 4Tx50% (EBIS) 4Tx50% 4Tx50% 3Tx 100% 
4Tx50% 
JDJ (QBIS) 
4Tx83% 
passive 
RCS relief PORV (3) JEF (3) JEF (3) PORV (3) PSD (3) RV (1) 
system PORV (2) 
EGRS KTP KTP KTP EGRS EGRS Included in 
the upgrading 


Table 2. Safety systems related with RCS (KKS/AKZ Coding System). 
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Figure 4. HA-1 First stage passive ECCS (VVER-1200). Mod- 
ified from https://de.nucleopedia.org/wiki/Datei:WWER-1200_ 
GE-1.svg Creative Commons license V3.0. 
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Figure 6. HA-3 Third stage passive ECCS (VVER-1200 V-509 
and VVER-1300 V-510). Modified from https://de.nucleopedia. 
Creative Com- 


org/wiki/Datei: WWER-1200_V-513 GE-3.svg. 
mons license V3.0. 


connected by the upper part to the CLs and to the HA-1 lines 
by the lower part. The setpoint for the injection of coolant 
water to reflood the core is when the RCS pressure is below 
15 bar. When it is reached, the HA-2 inject passively thanks 
to four inside discharge lines that have a different height in- 
side the accumulator. Initially, the discharge is produced by 
these 4 lines (6 kg/s), but after the water level drops below 
the highest line height, only 3 lines are used (2.5 kg/s); same 
for 2 (1.65 kg/s) and 1 (0.89 kg/s) line, [10] and [4]. This pro- 
vokes that the flowrate gets reduced by reducing the num- 
ber of discharge pipes, allowing to extend the injection time, 
instead of discharge everything in a short period of time. 
Thanks to this configuration, the HA-2 can inject water in the 
RCS during 24 hours, [2], [11]. They have a second function, 
to storage boron solution to fill the refueling pool compart- 
ment during refueling [12]. To complement this information, 
it is worth mentioning that this HA-2 design resembles the 
CMT of the AP1000 design, because they are connected 
from both sides to RCS, but also to the accumulators of 
the Korean design APR-1400, in the sense that they have 
a passive mechanism (fluidic device) that enlarges the time 
of injection. The Bushehr NPP also includes a second stage 
with 8 HAs, called KWU-ACC, which are similar to HA-1. In 
this case 4 out of 8 HAs inject to CLs and the other 4 to HLs, 
this is a typical arrangement in the design of Konvoi PWRs. 


Check-valves _ Hydroaccumulators HA-2 


Check-valves MOV 


o m o 
Turbine Steam | _|Turbine Steam 


/ \ i 


=<" Hel 


Figure 5. HA-2. Second stage passive ECCS (VVER-1200 


V-392M/V-509 and VVER-TOI). Modified from https://de.nu- 
cleopedia.org/wiki/Datei: WWER-1200 V-392M_GE-2.svg. 
Creative Commons license V3.0. 


Third stage of Hydro-accumulators (HA-3), Figure 6: 
Similar to the HA-2, but they are activated manually after 
the depletion of HA-2. They consist of 12 tanks (4Tx8) with 
a 41x33% redundancy and a total of 720 m? of water. They 
are only included in the designs VVER-1200/V509, V528 and 
V510 (VVER-TOI). Thanks to its big volume and its controlled 
discharge, the HAs allow to withstand SBO and LBLOCA se- 
quences for 72 hours without any external water injection [11]. 


High Pressure Safety Injection System (HPIS). The 
V392M design includes 2 trains (2T) with 100% of the capac- 
ity (2Tx100%) that inject in the CLs and HLs of two loops [2], 
[13], [14], [11], see also Figure 7. In the case of the V491 de- 
sign, it includes four trains, with a 4Tx100% configuration, and 
2 of them inject into the 4 lines of the HA-1 (so it constitutes a 
direct vessel injection), and the other 2 inject to the CLs and 
HLs of 2 loops, see Figure 8, [8], [15]and [1]. There are several 
exceptions to these configurations, e.g.: Hanhikivi NPP (also 
V491) includes a HPIS configuration with each train injecting 
to one HA-1 pipeline [8] and Bushehr NPP (V446) where the 
four HPIS trains are connected each one to CLs and HLs [16]. 
The shutoff pressure varies between different designs (65 to 
85 bar in Gen-lll/lll+, 109 bar in VVER-1000/V320). In pre- 
vious Gen-ll and Gen-lll designs, AES-91/92, VVER-1000/ 
V320 and VVER-440/V213 the injection was made into CLs 
exclusively, [7], [17], [6], [18], see Figure 9. Another difference 
between groups is the water source used for the HPSI and 
LPSI, since, in the V292M/V509 the source is the SFP, and 
later the containment sump. On the contrary, in the V491 
design, the labelled containment sump tank is used. 


Low Pressure Safety Injection System (LPIS). The 
V392M design includes 2Tx100% that inject into the ves- 
sel downcomer and the upper plenum through the HA-1 
lines, [1], [2], [11], [14], Figure 7. The LPIS, together with the 
HPIS and the SFP cooling system, form a system that in the 
392M design is referred to as the “Emergency and planned 
cooldown system”, [10] and [13]. In the case of the V491 and 
AES-91 designs, they include a 4Tx100% configuration; 2 of 
the trains inject into the HA-1 pipelines and the other in the 
CLs and HLs of two loops, [7] and [15], with a similar config- 
uration to the V491 HPSI System, Figure 8. This same design 
4Tx100% is present in AES-92, [17]. In this system there are 
again several exceptions, e.g.: Hanhikivi NPP project (also 
V491) and Bushehr NPP include a LPIS configuration, with 
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Figure 7. HPIS and LPIS Systems (VVER-1200/V-392M).Modified 
from https://de.nucleopedia.org/wiki/Datei:WWWER-1200_V-392M 
ND-SAQZ.svg Creative Commons license V3.0. 
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491HD-SAOZ.svg. Creative Commons license V3.0. 
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Figure 9. ECCS in VVER-1000/V-320 (Creative Commons 
license V3.0.). 


each train injecting to HL and CL of one loop, see [8] and 
[16]. The shutoff pressure is quite similar for the different de- 
signs (20 - 25 bar). In the Gen-ll designs, VVER-440/V213 
and VVER-1000/V320 include 3Tx100%, injecting to two 
lines of the HA-1 and the third to the CL/HL of one loop, [6], 
[18], Figure 9. Later, in the GEN-III designs (AES-91/92), they 
include 4Tx100%. 


VVER-reactors are also equipped with two independent 
and redundant systems to control any time the subcriticali- 
ty of the core: the shutdown and control system consisting 
of B,C-rods and the Emergency Boron Injection Sys- 
tem (EBIS), Figure 10. In the designs V392M and V509 two 
trains of 100% capacity are included, each train with two 
Motor Driven Pumps (MDP), 2Tx (2x50%) [1] [10] [11]. The 
designs V491 and AES-91 use a configuration of 4Tx50%, 
[3], [1]. AES-92 includes a different design with a passive 
four-channel system with 41x33% redundancy named 
Quick Boron Injection System (QBIS), [17], [2]. Previous Gen- 
Il VVER designs also include EBIS, [18], [6]. 


Finally, the RCS pressure relief is made through two 
different systems in the VVER-1200 designs. One for an- 
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Figure 10. Boron Injection System (VVER-1200/V-392M). 


Modified from https://de.nucleopedia.org/wiki/Datei:WWER- 
1200V-392MJDH.svg. Creative Commons license V3.0. 


ticipated transients, and accidental sequences without core 
damage, which are three Pilot Operated Safety/Relief Valves 
(POSV/PORV, passive) or Pulsed Safety Device (PSD) actu- 
ated by solenoid or spring, which can be operated for “Feed 
and Bleed” operations, [3]. The other system is the Emergency 
gas removal system (EGRS), which consist of 2x2 Motor Op- 
erated Valves (MOV) to avoid the containment failure caused 
by a high-pressure RPV failure in severe accident conditions, 
the objective of the system is to reduce the RCS pressure 
below 10 bar [3]. 


To summarize, the main differences with respect to Gen- 
Il designs are the two new set of accumulators (HA-2 and 
HA-3) and the emergency depressurizing system for severe 
accidents (although this system was later incorporated in 
Gen-ll designs). 


Safety systems related with the 
Secondary system 


The safety systems related to the secondary circuit that are 
common in all designs are presented in Table 3 and will be 
discussed hereafter. 


Emergency Feedwater System. This is an open circuit, 
similar to other PWR Gen-ll designs, and is available in the 
V491 and AES-91 designs in a 41x100% configuration, 
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Figure 11. Emergency Feedwater System (open loop) VVER- 
1200/V-491. Modified from https://de.nucleopedia.org/wiki/ 
Datei: VWWER-1200 V-491 SAP.svg. Creative Commons license 
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Figure 13. Passive Residual Heat Removal System (PHRS-SG). 
VVER-1200/V-392M. Under a Creative Commons license. 
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Figure 11. It provides feedwater from two water storage 
tanks [1], [15], [7]. In previous VVER designs (VVER-1000/ 
V320 and VVER-440/V213) the configuration used was 
3Tx100%, [6]. 


Emergency SG Cooldown System. This system is 
formed by a closed circuit of two trains, each train connect- 
ed to two SGs, with heat exchangers (HX) and two MDPs 
per train in V392M (2Tx200%), Figure 12, [10], [1], and one 
MDP for V509 (2Tx100%). The valves in the steam lines open 
automatically at 73.5 bar, forcing the condensation of the 
steam [10]. This system, which is not found in conventional 
Western PWR designs, was firstly installed in KKNPP (AES- 
92) with a 4Tx100% configuration [17]. 


All these VVER designs include also an Auxiliary Feed- 
water System even though this is not a safety system. 
This system is mostly used during startup, shutdown and 
planned cooldown. 


Passive Heat Removal System through Steam Genera- 
tors (PHRS-SG). This is a passive cooling system with a con- 
figuration of 4Tx33%, which include heat exchangers (HX) that 
function through natural circulation. They are used to actuate 
in sequences with inadequate core cooling. There are two de- 
signs on which the main difference is the heat sink of the HX: 


e In the V892M/ V509 /V510 /V528 designs the HXs are 
cooled with air. The system is formed by 4 independent 
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Figure 12. SG emergency cooldown system (closed loop) 
VVER-1200/V-392M. Modified from_https://de.nucleopedia.org/ 
wiki/Datei: WWWER-1200_V-392M_SAR.svg. Creative Commons 
license V3.0. 


Figure 14. Passive Residual Heat Removal System (PHRS-SG). 
VVER-1200/V-392M. Under a Creative Commons license. 
https:/Awww.sciencedirect.com/science/article/pii/S245230381 
7300997 


trains, each cooled by 2 HX (8 MW each), Figure 13 and 
Figure 14, [19], [12], [2]. The air conducts include a flowrate 
regulator and two air gate valves (closed during normal 
operation) installed at the inlet and outlet of the HX mod- 
ule, [19]. The system is actuated 30 seconds after the loss 
of AC and its operating time is unlimited. It requires the 
successful operation of 3 trains to achieve success in any 
operation mode. This system was firstly installed in KKNPP 
(AES-92) but including 3 HX per train, [17] and [20]. 


e In the V491 design four trains are found, each with 18 HX 
cooled by water from the Emergency Heat Removal Tanks 
(EHRT), which are stored at atmospheric pressure and 
are shared with the passive containment cooling system 
(PSHR-C), Figure 15, [15], [8], [3], [21]. The tanks are sup- 
posed to last 72 hours. 


There are similar systems in GEN-III, GEN-IV designs such 
as the Hualong, APR+, NuScale, SMART, CAREM, ACP-100 
and several Na (or Pb) fast reactors. 


Secondary Pressure Relief and Isolation Systems. 
Four systems are included in all designs [1], [12], Figure 16: 


e BRU-A (MOV): These are valves who require battery power 
and that alleviate into the atmosphere with a configuration of 
1x4SL and they can be actuated through the control room. 
They can operate during LOOP and SBO sequences. 

e Safety valves/PORV: There are two different designs 
2x4SL (V392M) and 1x4SL (V491). 

e BRU-K/BRU-C: Consist of eight valves that relief into the 
condenser. They are not available during LOOP or SBO se- 
quences. 

e Main Steam Isolation Valves (MSIV): The system includes 
MSIVs and MOV installed in series, [3]. 
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VVER-1000 


System V392M / V412 V428 V446 
V509 / V510 (AES-92) (AES-91) Bushehr 
KKNPP Tianwan NPP NPP 
Gen-lll+ 3en-ll4 
EFW LAR/LAS EFW EFW TX EFW 
4Tx100% 4Tx100% 4Tx100% 3Tx100% 3Tx100% 
Emergency SG JNB10 JNB10-40 
Cooldown V392M ATx100% 
System 2Tx200% 
V509/V510 
2Tx100% 
PHRS-SG JNB50-80 JNB JNB50-80 
4Tx83% 4Tx83% 4Tx83% 
air-cooled HXs | water-cooled air-cooled HXs 
HSx 
Secondary BRU-A 4x1 LBU (BRU-A) LBK (BRU-A) BRU-A 4X1 BRU-A 4X1 BRU-A 4X1 BRU-A to the 
pressure relief PORV 4x2 4x1 4x1 SV 4x2 PSD 4x2 SV 4x2 main steam 
system BRU-K PORV 4x1 SGPD 4x4 BRU-K BRU-K (6) BRU-K (4) header SRVs 
BRU-K BRU-K BRU-SN (1) BRU-SN (2) 6x2 
BRU-D (2) BRU-K (4) 


Table 3. Safety systems related with secondary system (KKS/AKZ Coding System). 


vaporation into the atmosphere 


Emergency heat removal tank 


Turbine steam 
1 
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Figure 15. Passive Residual Heat Removal System (PHRS-SG). 
VVER-1200/V-491. Modified from https://de.nucleopedia.org/ 
wiki/Datei: WWER-1200 V-491 SPOT-PG.svg. Creative Com- 
mons license V3.0. 


Part of the emergency cooling system 
of steam generator 


Safety valves 


Shock absorber 


Turbine steam Turbine steam 


Turbine steam 


Turbine steam 


Figure 16. Relief pressure system VVER-1200/V-392M. Mod- 
ified from https://de.nucleopedia.org/wiki/Datei: WWER-1200_ 
V-392M_BRU-A.svg Creative Commons license V3.0. 


Containment Safety Systems 


The containment of V392M or V491, Figure 17 and Figure 
18, have a primary containment pre-stressed concrete with 
steel liner and a secondary containment with standard rein- 
forced concrete, [8] and [1]. This double containment not on- 
ly impede any radioactive particle to escape to the environ- 
ment during an accident, but also, they protect the primary 
and secondary systems from external events. Bushehr NPP 
is a singular case because includes a KWU spherical-con- 
tainment. The main safety systems located inside this con- 
tainment are detailed in Table 4. 


Figure 17. Containment building VVER-1200 V-392M. Modified 
from https://de.nucleopedia.org/wiki/Datei: WWER-1200 


V392M.png. Creative Commons license V3.0. 


Passive Containment Heat Removal System (PHRS-C). 
This is a passive system that includes a water cooled HX in 
open circuit, that uses a tank that drains water due to natural 
circulation into the HXs, Figure 19. It is used in V491 design 
and has a configuration of 4Tx33%, [8], [15], [21]. As a com- 
ment, the Hualong CNNC design, includes a system with 
the same function but in closed circuit. The system found 
in AP1000 or CAP1400, satisfies the same function, but its 
design is radically different. 


Containment Spray System (CSS). These are spray sys- 
tems with HX similar to Gen-ll. They have the same water 


Ye NuclearEspafia » Octubre 2021 


SEGURIDAD 


f \ Evaporation into the atmosphere 


_ Emergency heat removal tank 


Figure 19. Passive Containment Heat Removal System VVER-1200/ 
V-491. Modified from https://de.nucleopedia.org/wiki/Datei:WW- 
ER-1200 V-491 SPOT-ZO.svg. Creative Commons license V3.0. 


Secondary containment 


Primary containment 


ontainment sump 


Figure 20. Containment Spray System VVER-1200/V-392M. 
Modified from https://de.nucleopedia.org/wiki/Datei:WW- 
ER-1200_V-392M_JMN.svg. Creative Commons license V3.0. 


VVER-1000 
System V392M / V491 V412 V428 V446 V320 V213 
V509 / V510 (AES-92) (AES-91) Bushehr 
KKNPP Tianwan NPP NPP 
Gen-lll+ 
PHRS-C JMP 
41x33% 
CSS JMN JMN JMN CSS TJ TQ TQ 
21x100% 41x50% 4T 4T 2TX100% 3TX100% 3TX100% 
CC JKM JMR JKM CC 
pie afe = elated onta e A oq e 
sources as the HPIS or LPIS. In the V392M design the con- 7 
figuration is 21x100% [1], Figure 20, and 41x50% in V491, | Gen Reactor design SDP A) || ERE 
[3] and [1]. Previous Gen-ll VVER designs include 3Tx100% WER-ICOONVEAU (1.5, 4.9) E-5 4.0E-6 
configuration [18], [6]. (Gen-ll) 
. , APR-1400 2.6E-6 1.1E-7 
Core Catcher (CC). This system aims to protect the con- WERE 
tainment structures from the corium after the RPV-failure at “ieee £ 2.7E-6 6.3E-8 
, ; , (AES-91) 
the lower plenum during a severe accident. This system was 
firstly installed in Tianwan NPP (AES-91) and it is conceptually WER-1000/V412 1.0E-7 2.2E-7 
similar to the EPR core catcher. The Russian core catcher in- (AES-92) 
cludes sacrificial oxides (aluminum oxides) that can be melt- HPR-1000 (Hualong) 6.9E-7 3.0E-8 
ed by corium to reduce generation of hydrogen [22]. AP1000 2.4E-7 1.9E-8 
Passive Autocatalytic Recombiners (PAR). These sys- EPR ZOE 2.7E-8 
tems passively recombine the hydrogen generated during Gerili VWER-1200/V392M Tees oe 
an accident with oxygen from the containment, generating eA || (AES-2006) cae ae 
water vapor using a catalyzer. WER-1200/V491 Wits EF 
The main differences with conventional designs are found (AES-2006) nies SE 
in the PHRS-C of the V491 design and the inclusion of the | WER-TOI TOET 5.7E-8 


core catcher. 


CONCLUSIONS 


The safety features of modern VVER-designs rely in redun- 
dant passive and active systems to assure the correspond- 
ing safety functions and hence they ease to comply with the 
safety requirements of different regulations. In addition, the 
comparison of the Core Damage Frequency (CDF) and Large 
Release Frequency (LRF) values predicted by PSA-studies 
for different VVER-designs with the ones of other GEN-III/III+ 
designs are shown in Table 5, [23], [24] demonstrates high 
safety levels of the VVER-designs comparable to the ones 
of other Gen-lll+ reactors. The predicted CDF and LRF-val- 
ues for VVER-designs are within the standards required for 
the new Gen-lll / Gen-lll + designs i.e., within CDF <1E-5/ 
yr, LRF <1E-6/yr, Table 5. The safety systems designs follow 


Table 5. PSA level 1 and level 2 results (internal events). 


the international guidelines and safety requirements regard- 
ing physical separation, redundancy, diversity and fail-safe. 
Compared to Gen-2 VVERs, many new passive safety sys- 
tems were implemented to assure short and long term heat 
removal and hence core coolability. 
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